GPMC not reporting on site links

[Guest]

Hell

I've been using GPMC reports to help with documenting our group policies. When I save an HTML report on a GPO that is linked to a site the site doesn't show up as a link. There's just a meesage saying that it only contians links in the domain of the GPO. Is there a way to get the site links? or is it planned for the next release

Also, if a user or group has been denied Apply To permissions, this information isn't showing up in the Security Filtering section. In the Delegation section the permission only shows up as custom

Thank
Steve Hutchison

 

[Vsevolod Titov [MSFT]]

No site links in GPO report is the designed behavior. Unfortunately this is
not something that will be changed in next releases. The reason is that
sites belong to the whole forest, not the domain of the current GPO. GPMC
re-constructs list of links by doing a search through all OUs in the domain
GPO belongs to, which is the only way how to do it. Doing a search through
all sites could be very expensive operation.

The second issue deny ACEs looks like a bug, but it is also designed
behavior. The reason is that it is often not trivial to understand the
implications of the deny entries in ACLs. In fact, many customers had
problems due to mis-configuration of the ACLs with deny entries in it. That
is why deny entries were declared deprecated and not showing in GPMC.